> Markdown version of [/videos/100062-small-secure-interconnected-the-next-internet-protocol?t=1168](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol?t=1168). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Small, Secure, Interconnected: The next Internet Protocol

Stop treating IP addresses as proxies for trust. Discover how programmable, zero-trust private networks eliminate clunky VPNs and make secure access as easy as sharing a Google Doc.

- **Speakers:** [Ross Kukulinski](https://www.wearedevelopers.com/@ross-kukulinski)
- **Event:** World Congress 2026 Europe
- **Published:** July 9, 2026
- **Duration:** 30:11
- **URL:** https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol

## Summary

Traditional networking relies on a globally reachable "one network to rule them all" philosophy, forcing engineering teams to spend years bolting on clunky access controls like VPNs, firewalls, and service meshes. This approach treats IP addresses as proxies for trust and turns secure access into a fragile scavenger hunt to resolve what are actually identity and policy problems masquerading under a topology trench coat disguise. The modern alternative flips this model: establishing small, secure, human-sized private networks anchored by zero-trust identity rather than network topology. By fixing the inherently insecure default of public reachability, organizations can eliminate frustrating latency penalties and endless gateway hair-pinning.

The foundation of this next-generation networking approach is identity-based access control. Rather than trusting a packet based on its origin subnet, policies evaluate the complete context: the human via a centralized Identity Provider, the specific device state, and the running workload itself. Teams can centralize readable, version-controlled policy text while distributing enforcement directly to the edge, guaranteeing direct, end-to-end encrypted connections. This fundamentally changes cross-organizational collaboration, treating external network access more like sharing a Google Doc directly with a contractor or vendor. Because access grants carry their own default expirations, revoking permissions becomes an automated process rather than a quarterly audit scramble.

As infrastructure and automation scale, identity primitives elegantly solve the hardest edge cases. Ephemeral Kubernetes pods tie access strictly to workload identity architectures rather than recycled IP addresses, leaving no permanent security holes when they die. Furthermore, the explosion of AI agents mandates treating non-human automation as distinct identities with aggressively scoped, revocable access spanning dynamically spun-up networks to mitigate the risks of software acting at machine speed. Ultimately, programmable networking shifts connectivity from a blocking Jira ticket into a native software capability. Innovations like Tailscale's TSNet allow developers to literally import networks as code into their applications, making the secure path the absolute fastest path to deployment.

**Keywords:** identity-based networking, zero trust access, vpn architecture challenges, kubernetes workload identity, spiffe spire integration, dynamic network policies, ai agent authorization, ephemeral network nodes, cross-organization remote access, distributed policy enforcement, programmable networking, network security defaults, tailscale tsnet, oidc trusted endpoints

## Chapters

1. **Balancing connectivity and usability in network infrastructure** (00:02) — Establishing reliable network connectivity remains a fundamental engineering challenge despite modern technological advancements.
1. **Solving private access with redundant network layers** (02:04) — Stacking tools like virtual private networks and firewalls transforms simple connectivity into complex topology problems.
1. **Fixing insecure network defaults with identity-based perimeters** (03:39) — Applying public reachability models to internal systems creates unnecessary security vulnerabilities and latency bottlenecks.
1. **Scaling system architectures with small comprehensible networks** (05:42) — Breaking monolithic architectures into smaller configurations allows developers to define structured intent clearly.
1. **Shifting network trust from subnets to combined identities** (07:03) — Verifying user authorization based on human accounts, device origin, and workload identity coordinates precision access without lateral vulnerabilities.
1. **Centralizing network policy with distributed endpoint enforcement** (09:11) — Maintaining human-readable access rules in a single repository while pushing direct execution to the network edge accelerates connection speed.
1. **Collaborating across organizations without network merging** (11:36) — Explicit resource sharing eliminates the need to integrate disparate identity providers or provision redundant virtual private networks.
1. **Managing temporary network access for contractors and containers** (14:33) — Binding expiration dates to short-term users and container lifecycles removes the risk of persistent unauthorized backdoors.
1. **Securing artificial intelligence networks matching machine speeds** (16:33) — Evaluating automation capabilities requires rigorous identity enforcement to securely revoke permissions and track autonomous network behaviors.
1. **Replacing traditional security workarounds with foundational access controls** (19:28) — Replacing layered security workarounds with primitive access controls eliminates the friction traditionally associated with network provisioning.
1. **Embedding zero-trust network connectivity directly into application code** (21:13) — Importing network identity functions as programming libraries transforms rigid infrastructure into dynamic application capabilities.
1. **Handling dynamic permissions and ephemeral identities in platforms** (24:15) — Integrating container labels and workload identity standards enables automated access control limits outside primary network policies.
1. **Evaluating fallback policies and network traffic configurations** (25:57) — Implementing peer relays and latency-aware routing improves performance reliability when direct point-to-point connections fail.
1. **Isolating department resources with declarative network sharing** (27:34) — Creating logically separated internal networks simplifies complexity by ensuring independent groups efficiently interact with appropriate databases.
1. **Merging application authorization layers with network identity states** (28:36) — Extending foundational network handshake protocols into unified authentication boundaries allows teams to systematically protect proprietary systems.

## Related Moments

- [Mitigating agent risks with zero trust networking](https://www.wearedevelopers.com/videos/100162-the-private-ai-platform-why-agentic-apps-need-a-private-application-platform) (from "The Private AI Platform: Why Agentic Apps Need a Private Application Platform")
- [Integrating secure connectivity and responsible artificial intelligence practices](https://www.wearedevelopers.com/videos/969-make-it-simple-using-generative-ai-to-accelerate-learning) (from "Make it simple, using generative AI to accelerate learning")
- [Leveraging the dynamic network for scalable applications](https://www.wearedevelopers.com/videos/23-bitcoin-ledger-vs-blockchain) (from "Bitcoin- Ledger vs Blockchain")
- [Protecting infrastructure with the shared responsibility model](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) (from "Building Well-Architected applications")
- [Implementing zero trust on traditional cloud providers and serverless](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) (from "Trust Issues: Because Zero-Trust Isn’t Optional Anymore")
- [Implementing secure network tunnels on managed cloud infrastructure](https://www.wearedevelopers.com/videos/1219-starting-business-without-breaking-the-bank-self-hosted-oss-productivity-ecosystem) (from "Starting business without breaking the bank: Self hosted OSS productivity ecosystem")

## Related Articles

- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Graph and AI Trends 2026: Why Is AI Running but Not Yet Delivering?](https://www.wearedevelopers.com/magazine/680-graph-and-ai-trends-2026-why-is-ai-running-but-not-yet-delivering)

## Related Jobs

- [Principal Software Engineer, Identity](https://www.wearedevelopers.com/jobs/ext/1469181-principal-software-engineer-identity) at **GitHub**
- [Senior Engineer, Infrastructure Platform](https://www.wearedevelopers.com/jobs/ext/328836-senior-engineer-infrastructure-platform) at **Intercom, Inc.**
- [Security Architect - AI](https://www.wearedevelopers.com/jobs/ext/1581899-security-architect-ai) at **ZEISS Group**
- [Principal Software Engineer, Enterprise AI Platform](https://www.wearedevelopers.com/jobs/ext/1467292-principal-software-engineer-enterprise-ai-platform) at **GitHub**
- [Network Automation Engineer](https://www.wearedevelopers.com/jobs/48187-network-automation-engineer) at **Burda**
- [Cloud-Native Architect (all genders welcome) - Kubernetes, CNCF, MLOps](https://www.wearedevelopers.com/jobs/ext/101479-cloud-native-architect-all-genders-welcome-kubernetes-cncf-mlops) at **Rosenxt Group**